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Related Applications 
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hereby incorporated by reference. 

BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention relates to real-time event scheduling systems. In 
particular, the invention relates to dynamic slip control that takes into account the 
actual time that events occur. 

Description of the Related Art 

Real-time systems must maintain a timely and accurate interaction with their 
physical environment in order to meet the overall system design objectives. The 
times at which the interaction occurs and the values of the system state at the 
interaction times are critical parts of the system performance. The further the actual 
interaction time is from the desired interaction time, and the further the system state 
value is from the desired value, the worse is the quality of the system performance. 

The interaction between the real-time system and its environment may be 
initiated by the real-time system, which is called proactive interaction, or by the 
environment, which is called reactive interaction. Since the real-time system and its 
environment are typically distributed systems, their interactions are asynchronous. 

When elapsed time does not play a role in the interaction, the situation 
requires discrete event scheduling only. However, when elapsed time does play a role 
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in the interaction, the situation requires real-time event scheduling. Discrete event 
scheduling is usually adequate when the real-time system's internal state is purely 
logical or symbolic. Real-time event scheduling is necessary when the real-time 
system has time-dependent internal state. Some examples of systems where real-time 
event scheduling is necessary are observer-based control systems, discrete time 
observation feedback systems, and real-time simulation systems. In the first case, the 
real-time system filters its timed observations of the environment. In the second case, 
the real-time system uses timers to schedule the observation feedback computations. 
In the third case, the real-time system simulates the control system as well as parts or 
all of the physical environment. 

In many implementations, real-time systems are realized simply as discrete 
time tasks with periodic scheduling. For example, let * be the real-time system's 
internal state and let A be the scheduling period. The variable k denotes the period 
number and the function c k updates the internal state to the new period number. Then, 
at times 

0, A, 2A kA 

the computation 



4* + 11 = ^(4*1) 



is performed based on the observation at kA. 

Often, multiple such tasks are scheduled concurrently on the same real-time 
implementation platform, and techniques such as rate monotonic scheduling are used 
to guarantee the design performance of such systems. Exemplary references include 
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C. L. Liu and J. W. Layiand, Scheduling algorithms for multiprogramming in a hard 
real-time environment, 20(1) JOURNAL OF ACM 46-61 (January 1973); J. Y.-T. Leung 
and M. L. Merrill, A note on preemptive scheduling of periodic, real-time tasks, 1 1(3) 
Information Processing Letters 115-118 (November 1980); J. Y.-T. Leung and J. 
5 Whitehead, On the complexity of fixed-priority scheduling of periodic, real-time tasks. 
2 Performance Evaluation 237-250 (1982); D. W. Leinbaugh, Guaranteed 
response time in a hard real-time environment, IEEE TRANSACTIONS ON SOFTWARE 
Engineering (January 1980); S.-C. Cheng, J. A. Stankovic, and K. Ramamritham, 
Scheduling algorithms for hard real-time systems— a brief survey, IEEE TUTORIAL 

0 Hard Real-Time Systems 150-173 (1988); J. Lehoczky, L. Sha, and Y. Ding, The 
rate monotonia scheduling algorithm: Exact characterization and average case 
behavior, Proceedings of the Real-Time Systems Symposium 166-171 (December 
1989). However, this design guarantee may not extend to the implementation of the 
actual system. 

1 Because many real-time platforms may be implemented with periodic 
scheduling, such an approach is simple and attractive for scheduling each task. 
However, the periodic scheduling approach, while simple, leads to several drawbacks 
when implementing event scheduling models. 

First, the essential asynchronous nature of the system is lost, leading to added 
latency in the interaction with the environment. In proactive interactions, this latency 
arises because the interaction time is different from the desired event time, which is 
typically the time at which the system's internal state crosses some guard condition. 
In reactive interactions, this latency arises because the interaction occurs at the end of 
the scheduled period even though the asynchronous interrupt may occur before the 
period expires. 
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Second, additional computational load is placed on the implementation 
because computations are performed periodically whether or not they are used. This 
additional computational load may require more expensive real-time implementation 
platforms. 

Third, while the kih event is scheduled at time kA. the actual time at which the 
event occurs is generally off from the scheduled time because of the nonideal nature 
of the underlying physical implementation platform. Even so, the state value at the 
scheduled time &A, and not the state value at the actual event time, is used in the 
interaction. This leads to inaccurate interaction with the physical environment. 

Given these problems, real-time event scheduling is often desired over event 
scheduling implemented by a periodic system. However, even if a well-designed real- 
time system can theoretically guarantee the timely completion of all tasks, in practice 
the tasks may not be completed at the desired times because of imperfections in the 
underlying real-time implementation platform. 

: The discrepancy between the actual and desired interaction times is called the 
slip of the system. Slip control is an algorithmic technique for ensuring that slip is 
small. Dynamic slip control uses the application's dynamical model information to 
reduce both slip and the discrepancy in the system's state values. 

Traditional real-time scheduling techniques typically do not use the 
application's dynamical models for fine-tuning the scheduler performance. While 
system implementations may use physical time information for scheduling timer 
interrupts, they do not use physical time information to correct for slip. Thus, while 
they can achieve some level of slip control for simple applications with periodic 
schedules, generally they cannot achieve dynamic slip control for general purpose 
real-time event scheduling. Thus, there is a need for an algorithmic technique for 
dynamic slip control for real-time event scheduling. 
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SUMMARY OF THE INVENTION 

The present invention addresses these and other problems of the prior an by 
providing an apparatus, method, and computer-readable program code for 
dynamically controlling slip. 

According to one embodiment, a method according to the present invention 
includes the steps of detecting an actual interrupt time corresponding to an actual 
interrupt, interacting with a physical environment in response to the actual interrupt, 
and calculating a wait period based on the actual interrupt time and the interacting 
step. The wait period corresponds to a next scheduled interrupt time. The method 
further includes the step of detecting a completion time after the calculating step. The 
method still further includes the step of reducing the wait period calculated, based on 
the completion time and the actual interrupt time. The method yet further includes the 
step of waiting for at most the wait period as resulting from the reducing step. 

According to another embodiment, a computer-readable program code 
according to the present invention includes a computer-readable program detection 
code, a computer-readable program interaction code, a computer-readable program 
calculation code, a computer-readable program reduction code, and a computer- 
readable program wait code. The computer-readable program detection code is 
configured to detect an actual interrupt time corresponding to an actual interrupt and 
to store an actual interrupt time value. The computer-readable program interaction 
code is configured to interact with a physical environment in response to the actual 
interrupt. The computer-readable program calculation code is configured to calculate 
a wait period based on the actual interrupt time and the computer-readable program 
interaction code. The wait period corresponds to a next scheduled interrupt time. The 
computer-readable program detection code is further configured to detect a 
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completion time, after operation of the computer-readable program calculation code, 
and to store a completion time value. The computer-readable program reduction code 
is configured to reduce the wait period based on the completion time value and the 
actual interrupt time value. The computer-readable program wait code is configured 
to wait at most for the wait period as resulting from operation of the computer- 
readable program reduction code. 

According to yet another embodiment, an apparatus according to the present 
invention includes a processor circuit, and a memory circuit. The processor circuit is 
configured to process instructions and data. The memory circuit is coupled to the 
processor circuit and is configured to store a computer-readable program code, said 
computer-readable program code comprising instructions and data, configured to 
operate with the processor circuit, and is otherwise as described above. 

By reducing the wait period based on actual interrupt time (instead of 
scheduled interrupt time) and on the completion time, slip is prevented from 
accumulating and is reduced. 

A better understanding of the features and advantages of the present invention 
will be obtained by reference to the following detailed description and accompanying 
drawings which set forth illustrative embodiments in which the principles of the 
invention are utilized. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a graph of a state variable as a function of time for an ideal system. 
FIG. 2 is a block diagram of an event scheduling system. 
FIG. 3 is a graph of a state variable as a function of time for a non-ideal (i.e., 
real world) system. 

FIG. 4 is a time line showing slip and timing events for the non-ideal system. 
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FIG. 5 is a flowchart of a dynamic scheduling algorithm according to an 

embodiment of the present invention. 

FIG. 6 is a plan view of a storage medium such as a magnetic (floppy) disk or 

CD-ROM containing an embodiment of a computer program according to the present 

invention. 

FIG. 7 is a block diagram of a circuit according to an embodiment of the 
present invention. 

FIG. 8 is a block diagram of an event scheduling system used in the examples 
of FIGS.9A-9D. 

FIGS. 9A-9D are state diagrams corresponding to the examples applied to the 
system of FIG. 8. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The following detailed description is arranged as follows. First, an ideal 
theoretical application modeling framework is presented. Then a three-layered 
implementation structure is put forward. Next, slip is defined and dynamic slip 
control is described. An algorithmic presentation of the dynamic slip control process 
is then made. Next, a theoretical example illustrates various system implementations 
including the dynamic slip control process. Finally, relevant portions of a C++ source 
code implementation are provided in an appendix. 

Although this application uses the terms "hardware" and "software" to refer to 
the implementation of a preferred embodiment of the present invention, it is 
contemplated that these specific terms are not required and that the present invention 
may be implemented in microcode, firmware, etc. as desired. 
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Ideal Modeling Framework 

In defining an ideal proactive scheduling framework, let 

be a sequence of time phases with the following properties: 



t\ = 0 

t\ = t k for all k 

r, +1 > t\ for all/: 



Let x be the system's continuous state variable. The variable .v has piecewisc 
continuous trajectories. In the phase [t\ , t k ^ ] , let the system's dynamical model be 
given as 

x = f k (x) (2) 

with the initial condition x(t\ ) = x k . 
At time t\ , define 

A k = inf {/ 1 g k (x(t)) > 0} (3) 



(4) 



where the function g k (x(t)) defines a guard function. 



05/20/99 



TEJA-100 PATENT 
In the transition from t k+x to t\. l9 the following computation is performed: 

x(r M )=c k (x(t M )) (5) 

5 We will interpret the execution of this computation as an interaction of the system 

with the physical environment. We will treat t' M as the time at which this interaction 
occurs. The state information at time t k ^ is used for the interaction. 

Then, define the value sequence corresponding to the phase sequence ( 1 ) as 

10 0t(/' 0 ),*(/,)), (JtCf, ),(*(/,)), (*('\ ». ( 6 ) 

FIG. 1 shows the kih phase in this setting. 

This model is derived from a hybrid system model with switched flow 
equations and guarded transitions with actions. The hybrid system model is described 

15 in R. Alur, C. Courcoubetis, T. Henzinger, and P. Ho, Hybrid Autornatia: An 
Algorithmic Approach to the Specification and Verification of Hybrid Systems, 
Hybrid Systems, (LNCS 736) 209-229 (Springer- Verlag 1993); A. Deshpande and 
P. Varaiya, Viable Control of Hybrid Systems, HYBRID SYSTEMS O (LNCS 999) 
(Springer- Verlag, 1995); and A. Deshpande, A. Gollu and L. Semenzato, The Shift 

20 Programming Language and Run- time System for Dynamic Networks of Hybrid 

Systems, EEEE Transactions on Automatic Control: Special Issue on Hybrid 
Systems (May 1998). 

In defining an ideal reactive scheduling framework, let I k > t\ be the time at 
which the physical environment interrupts the application given that the kih event has 

25 already occurred. 
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t M = win(t\ +A t , I t ) (7) 

Further, the computation to be performed at the kth event may depend on the type of 
interrupt (proactive vs. reactive) that caused it. Let r k be the type of the interrupt. 
Then, equation (5) is modified as 

x(t' k . a ) = c t (r k , x(t M )) (8) 

Implementation Structure 

FIG. 2 shows an implementation of an event scheduling system 100, including 
application software 102, scheduling software 104, and implementation platform 106. 
The event scheduling system 100 interacts with a physical environment 1 10. 

Application software 102 contains the functional description of the specific 
application model, namely, the variable x, and the functions f k , g k , and c k . 

Scheduling software 104 contains the algorithmic description of the event 
scheduler, namely, the computational procedure for taking the transitions from t k to 
t\ and from t\ to t k , x , and for evaluating t k ^ , the next event time. Scheduling 
software 104 is more fully described below with reference to FIG. 5 and the 
accompanying text. 

Implementation platform 106 contains the hardware and software platform 
that provides the real-time implementation services, namely, physical time 
information, timer and environment interrupt delivery, and numerical processing. 
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Physical environment 1 10 is the real-world system with which event 
scheduling system 100 interacts. Such interaction may be in the form of signals from 
physical environment 1 10 indicating its state, and signals from event scheduling 
system 100 to which physical environment 1 10 is to respond. This response may 
include modifying its state, thereby forming a dynamic feedback loop. 

Slip 

Let 

[i'oJM*\J2l>»-*li\J M h.-. (9) 
be a sequence of slipped time phases with the following properties: 

7\ > 7 k for all/: 
t' M Z 7\ for all* 

Define slip S* as the interval between the occurrence of interaction with the physical 
environment and the scheduled time of that interaction: 

S k =t\-? k (10) 

Slip arises from internal factors such as unaccounted processing time as well as 
external factors such as inaccurate delivery of timer interrupts by the real-time 
platform. Let be the slip during the kth phase. The slip s k arises due to processing 
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and interrupt latency associated with the kth event only, 
taken to account for it, slip could accumulate as 
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Then, unless special care is 



Another effect of inadequate slip control is that the interaction with the physical 
environment can be based on out-of-date state values. Typically, the value sequence 
(6) is used in conjunction with the slipped time phase sequence (9), leading to 
inaccurate interaction with the environment. 

Dynamic Slip Control 

There are three objectives of slip control. The first is to ensure that slip does 
not accumulate; i.e., that S k is independent of k. The second is to ensure that slip is 
small; i.e., that S k is as close to zero as possible. The third is to ensure that the 
interaction with the physical environment is based on up-to-date state values; i.e., that 
the value sequence is 

(*(F' 0 ), (x(7\ ), (x(l )), (x(t\ ),x(t M )), ... (12) 

FIG. 3 shows the kih phase in this setting. Define the following quantities: 

S k <nv — random latency introduced by the real-time platform in 

delivering an interrupt 

Sk Pd processing time required to integrate the system state flow 

equation (2) 
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S£ ,mp ~ processing time required to compute the state update 

computation, equation (5) 

S* — processing time required to compute t k [see equations (3) and 

(4)] 

A k — time interval to the next timer interrupt 

Suppose that the kth timer interrupt is scheduled for time t k . Implementation 
platform 106 will deliver the interrupt to scheduling software 104 at 

At the time 



scheduling software 104 will complete the state variable update to time 7 k , yielding 
x(7 k ) . At the time 

1 ft - l upd 

system 100 will complete interacting with the physical environment 1 10, yielding 
x{7\ ) . At the time 



T =: F' 
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scheduling software 104 will complete the computation of A^, . Scheduling software 
104 will compute 

A, = A k - (T r - 7 k ) 

and set the timer interrupt to occur after A k . This ensures that the (£+l)st timer 
interrupt is scheduled for time t M . 

FIG. 4 shows these timing components. Scheduling software 104 obtains 
from implementation platform 106 7 k and 7V, which are readings of the physical, real- 
world time. 

Note that slip is 

5, = Sf k +S^+S;' W/ ' (13) 

Note the following characteristics of equation (13). First, since the right hand 
side of equation (13) is independent of any cumulative effects, this procedure ensures 
that slip does not accumulate. 

Second, the magnitude of the slip in equation (13) can be reduced by reducing 

one or more of S* nv , S" pJ and S L " mp . In addition, slip can be reduced by estimating 

k k k 

I 

each of these contributing factors and then accounting for them in the computation of 
A *. The estimation can be accomplished either by analyzing the performance of the 
real-time platform and the application model in an off-line manner, or by maintaining 
statistical performance information in an on-line manner. 
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Third, the computation at 7 * is based on state values at 7 k and not at t k , 

ensuring accurate interaction with the physical environment. 

Fourth, the slip component S* k is removed altogether from equation (13) 

because A k takes the physical time reading T r into account. 

This approach to dynamic slip control works because it uses two important 
elements: information about the application models and information about the 
physical time at critical points in the execution cycle. 

Because this approach to real-time event scheduling uses the value sequence 
(12), care must be taken in programming the computations c k in the model. 

For example, consider a simple system in which .ve R, /<(*)= 1, * 0 =0, guard 
crossing is triggered whenever .t > A, and c k assigns 0 to .v. Ideally, in this system, an 
event is scheduled at each kA. 

Now, let S env = 6 for each k. Then, in fact, events will be scheduled at times 

k 

£(A+6), leading to increasing slip. 

The correct modeling of the computation c* is to assign x - A to .t. Thus, with 

S™ v = 6, the value of * after c k will be 6. This leads to interrupts being scheduled at 

each kA as desired, and the slip is always 6, which is unavoidable. Note that slip does 
not accumulate. 

Algorithm for Dynamic Slip Control 

We will assume that the real-time platform provides the function 

current_time() 
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to obtain the value of physical time at the time of the call, and the function 



x = set_jnterrupt_timer(T) 

to set the timer interrupt to occur T seconds after the call. The effect of 
set_interrupt_timer(T) is to suspend the algorithm until either the timer interrupt or 
the interrupt from the physical environment occurs, after which execution is resumed. 
The function returns the type of interrupt which caused the execution to be resumed. 
We will assume that the scheduler provides the function 

next_eventjinie(£, x) 

which solves for A*, the function 

update(A% T) 

which integrates equation (2) forward by time T, and the function 

compute(T, .r) 
which invokes the computation (8). 
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We will assume that the initial slip So = 
scheduler algorithm. 
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0. Following is pseudocode for the 



x = x 0 



5 



t - current_time() 



k= 1 



forever { 



A = next_event_time(£, x) 



x = seMnterrupt_timer(A - (current_time() - / )) 



10 



7 next - current_time() 



x = update^, ( 7 next - 7 )) 



t next 



x = compute(t, K x) 
k = k+ 1 

} 

This pseudocode is detailed with reference to FIG. 5, which provides a flowchart of a 
dynamic scheduling method 150 corresponding to this pseudocode. (The components 
that perform these functions are parts of event scheduling system 100 in FIG. 2.) 

In step 152, the state variables x and / are initialized by application software 
102 and scheduling software 104, respectively, and scheduling software 104 sets the 
counter k to 1. In step 154, implementation platform 106 notes the current time and 
scheduling software 104 stores this value as 7 . In step 156, scheduling software 104 
computes the time to the next event and stores this value as A. 

In step 158, implementation platform 106 notes the current time and 
scheduling software 104 stores this value as T r , That is, the computation of step 156 
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takes an amount of time equal to the difference between T r and 7 . This difference is 
represented by the period S* k in FIG. 4. Then, scheduling software 104 computes this 

difference by subtracting 7 from T r . Finally, scheduling software 104 modifies A by 
subtracting this difference. 

In step 160, scheduling software 104 instructs implementation platform 106 of 
the modified A time period, and scheduling software 104 and application software 
102 then enters a sleep or inactive mode. 

In step 162, implementation platform 106 generates an interrupt, ending the 
sleep period of step 160. If implementation platform 106 generates a reactive 
interrupt, that is, an interrupt from physical environment 1 10, the sleep period ends 
prematurely. If implementation platform 106 generates a proactive interrupt, that is, 
on expiration of the modified A time period, then the sleep period ends as scheduled, 

as modified by the slip (see FIG. 4 and accompanying text) caused by the random 
latency of physical environment 1 10. Then, implementation platform 106 notes the 
current time and scheduling software 104 stores this value as 7 next . 

In step 164, scheduling software 104 instructs application software 102 to 
update the state variables corresponding to physical environment 1 10. Application 
software 102 then updates the state x using the function f k (x) . As noted in FIG. 4 
and the accompanying text, this takes an amount of time corresponding to the slip 

k 

In step 1 66, scheduling software 104 replaces the stored 7 with 7 next in 
preparation for the incrementation of k when the algorithm is repeated. Note that step 
166 is not required to be located between steps 164 and 168, and may be performed at 
any time prior to the next time 7 is used (that is, in step 168). 
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In step 168, scheduling software 104 instructs application software 102 to 
update the state variables corresponding a desired action in relation to physical 
environment 1 10. Application software 102 then computes the modified state .v*+i 
using the function c*. This may also involve implementation platform 106 passing the 
5 updated state variables to physical environment 110. As noted in FIG. 4 and the 

1 * c com P 

accompanying text, step 168 takes an amount of time corresponding to the slip S k 

In step 170, scheduling software 104 increments £, and loops back to step 156. 
Source code in C++ language implementing this algorithm is contained in the 

Appendix. 

10 FIG. 6 shows that object or executable code corresponding to scheduling 

software 104 may be embodied on a computer-readable medium such as a floppy disk 
180 or CD-ROM. 

FIG. 7 shows that event scheduling system 100 may be implemented as part of 
a system-on-a-chip 188. System 188 includes a processor circuit 190 (which has an 
15 internal timer circuit), a memory circuit 192, and an interface circuit 194. A bus 196 
interconnects these components. Application software 102 and scheduling software 
104 may be stored in memory circuit 192 and executed by processor circuit 190. 
Processor circuit 190 may also control the other components on system 188. Interface 
circuit 194 provides the connection to the physical environment 1 10. 

20 

Example 

FIG. 8 is a representative system 200 that will be used in an example 
comparing the dynamic slip control system of the present invention with other control 
systems. System 200 includes a controller block 202, an interface block 204, and a 
25 physical system block 206. Controller block 202 implements application software 
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102 and scheduling software 104. Interface block 204 represents the non-idealities 
inherent in interacting with physical system 206. 
The controller equation is 



x = f\(x, y) 

x- y 
x(0) = 1 

where x is the controller's internal state and y is the sampled and held physical 
system observation. The physical system equation is 

y = fi(y, x ) 

-l + .t 
>'(0) = 0 



where v is the physical system's internal state and x is the sampled and held 
controller command. 

Models of four interfaces are shown in FIGS. 9A-9D. The ideal interface of 
FIG. 9 A delivers the interrupt at each kA and instantaneously transfers the values of .t 
and y to x and y , respectively. 

The dynamic slip control interface of FIG. 9B delivers interrupts at kA + 6. It 
transfers the value of x at kA + 6 and the value of y at kA + 6 + y. 

The no value update interface of FIG. 9C delivers interrupts at + 8. It 
transfers the value of * at and the value of y at kA + 8 + y. 
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The no slip control interface of FIG. 9D delivers interrupts at k(A + 6 + y). It 

transfers the value of x at k(A + 6 + y) + 6 and the value of v at £(A + 6 + y) + 6 . + y. 
The parameter values for the example were chosen as 

A = 20 ms 
6 = 3 ms 
y = 1 ms 



Each interface of the system was modeled, simulated and analyzed using the 
DIADEM real-time software tools and platforms. See A. Deshpande, The DIADEM 
System for Real-Time Dynamic Event Management, LNCS PROCEEDINGS OF THE 1997 
NATO Workshop on Discrete Event and Hybrid Systems (Springer- Verlag 
1997). The DIADEM software is available from Teja Technologies, Inc., Richmond, 
California. 

For this example, the error in the case of no value update interface is about 
five times worse than the error in the case of dynamic slip control interface, and the 
error in the case of no slip control interface is about five times worse than the error in 
the case of no value update interface. 



Conclusion 

The above-described embodiments of the present invention reduce slip in real- 
time event scheduling systems, thereby improving performance of those systems. 
Slip is reduced by setting a wait period based on the difference between the actual 
interrupt time (instead of the scheduled interrupt time) and the completion time of 
various interactions and calculations. 
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It should be understood that various alternatives to the embodiments of the 
invention described herein may be employed in practicing the invention. It is 
intended that the following claims define the scope of the invention and that structures 
within the scope of these claims and their equivalents are covered thereby. 
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